<?xml version="1.0" encoding="utf-8"?>
<updates>
  <update status="final" type="security" version="2" from="release-engineering@redhat.com">
    <id>RHSA-2024:0866</id>
    <issued date="2024-02-19 17:55:11 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2024 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP15.

Security Fix(es):

* IBM JDK: Eclipse OpenJ9 JVM denial of service (CVE-2023-5676)

* OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)

* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2024-02-19 17:55:09 UTC" />
    <references>
      <reference id="RHSA-2024:0866" title="RHSA-2024:0866" type="self" href="https://access.redhat.com/errata/RHSA-2024:0866" />
      <reference id="2243627" title="CVE-2023-22081 OpenJDK: certificate path validation issue during client authentication (8309966)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2243627" />
      <reference id="2243637" title="CVE-2023-22067 OpenJDK: IOR deserialization issue in CORBA (8303384)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2243637" />
      <reference id="2250255" title="CVE-2023-5676 IBM JDK: Eclipse OpenJ9 JVM denial of service" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2250255" />
      <reference id="CVE-2023-5676" title="CVE-2023-5676" type="cve" href="https://access.redhat.com/security/cve/CVE-2023-5676" />
      <reference id="CVE-2023-22067" title="CVE-2023-22067" type="cve" href="https://access.redhat.com/security/cve/CVE-2023-22067" />
      <reference id="CVE-2023-22081" title="CVE-2023-22081" type="cve" href="https://access.redhat.com/security/cve/CVE-2023-22081" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.15" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.15-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">b305e7969013c246e4d4353e7bf2c095731b42c0ef09bc6fb71ecc24dfd52de3</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.15" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.15-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">59f80f68c4cf7eb7bf19035daa506224915be7587eced9bcf98924d905f42b72</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.15" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.15-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">6c621d5f5ddc0d480d78072c3f6ecd909b8a275e9962eb79a6ee188e101dd0af</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.15" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.15-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">f979940eccfc69e55131a8c8ed2b1031fd9c59a2a4d0c1642b09022c96597e0e</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.15" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.15-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">66b40d0f5103ec35562cd5a9b848b1344821b1f584cea52cdc11c7995afe0def</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.15" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.15-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">7524939ae0aa924e55ef4f6e1f875cefa950f35567453fba7e53a07ba9f1a648</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.15" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.15-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">f9672992092a173dd3b18170b7bfe47e87a22e143e7b839e19a079f02d6dcf67</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.15" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.15-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">a420a21ce002211aa63d54db75afef4c8575da5034ac4f219802b56541b0d807</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="3" from="release-engineering@redhat.com">
    <id>RHSA-2024:6595</id>
    <issued date="2024-09-11 13:33:23 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2024 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP15.

Security Fix(es):

* IBM JDK: Object Request Broker (ORB) denial of service (CVE-2023-38264)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2024-09-11 13:33:23 UTC" />
    <references>
      <reference id="RHSA-2024:6595" title="RHSA-2024:6595" type="self" href="https://access.redhat.com/errata/RHSA-2024:6595" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
      <reference id="CVE-2024-27267" title="CVE-2024-27267" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2024-27267.html" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.30" release="2.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.30-2.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.30-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cde90d4677f0fd168d7bb6db114c175bb21edf3f4864c84ec372f13437400693</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.30" release="2.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.30-2.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.30-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4f82cc1be3e0328d3f854b9a36fe9b6983c10bfab14a2334d68a627e691a84c5</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.30" release="2.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.30-2.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.30-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e701d899f239f76cd706bc38d1cd1daf4bc5375df9e5c5c0fd160e2dbfbf1644</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.30" release="2.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.30-2.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.30-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">419474e434ec499ae97d7fe4078a7ba487636f03df0ebeaf27eb78040e1e0aa0</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.30" release="2.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.30-2.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.30-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">134ed4f46f750c058386632ffe9f40c2425cee93b9cb2058cc9e6813456c7f63</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.30" release="2.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.30-2.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.30-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8b966c81f41acee8570b42e03d86a4a66623b63ab38abb41b7a6e51604162baa</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.30" release="2.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.30-2.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.30-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f6ff5b22b8a41a85a014cf6f46503d7ed1f5211f6e8e34c26368fae126244987</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.30" release="2.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.30-2.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.30-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fe5a9169ef35c603b8078aff66573c66bc12e04059d15022cbec3f1d6cda23a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2020:2241</id>
    <issued date="2020-05-20 15:49:29 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2020 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>3</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR6-FP10.

Security Fix(es):

* OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949)

* OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) (CVE-2020-2803)

* OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274) (CVE-2020-2805)

* OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037) (CVE-2020-2654)

* OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408) (CVE-2020-2781)

* OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825) (CVE-2020-2800)

* OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201) (CVE-2020-2830)

* OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898) (CVE-2020-2754)

* OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904) (CVE-2020-2755)

* OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541) (CVE-2020-2756)

* OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549) (CVE-2020-2757)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2020-05-20 15:49:29 UTC" />
    <references>
      <reference id="RHSA-2020:2241" title="RHSA-2020:2241" type="self" href="https://access.redhat.com/errata/RHSA-2020:2241" />
      <reference id="1761594" title="CVE-2019-2949 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1761594" />
      <reference id="1791217" title="CVE-2020-2654 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1791217" />
      <reference id="1823199" title="CVE-2020-2754 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1823199" />
      <reference id="1823200" title="CVE-2020-2755 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1823200" />
      <reference id="1823215" title="CVE-2020-2756 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1823215" />
      <reference id="1823216" title="CVE-2020-2757 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1823216" />
      <reference id="1823527" title="CVE-2020-2800 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1823527" />
      <reference id="1823542" title="CVE-2020-2830 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1823542" />
      <reference id="1823694" title="CVE-2020-2803 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1823694" />
      <reference id="1823844" title="CVE-2020-2805 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1823844" />
      <reference id="1823960" title="CVE-2020-2781 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1823960" />
      <reference id="CVE-2019-2949" title="CVE-2019-2949" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2949.html" />
      <reference id="CVE-2020-2654" title="CVE-2020-2654" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2654.html" />
      <reference id="CVE-2020-2754" title="CVE-2020-2754" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2754.html" />
      <reference id="CVE-2020-2755" title="CVE-2020-2755" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2755.html" />
      <reference id="CVE-2020-2756" title="CVE-2020-2756" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2756.html" />
      <reference id="CVE-2020-2757" title="CVE-2020-2757" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2757.html" />
      <reference id="CVE-2020-2781" title="CVE-2020-2781" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2781.html" />
      <reference id="CVE-2020-2800" title="CVE-2020-2800" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2800.html" />
      <reference id="CVE-2020-2803" title="CVE-2020-2803" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2803.html" />
      <reference id="CVE-2020-2805" title="CVE-2020-2805" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2805.html" />
      <reference id="CVE-2020-2830" title="CVE-2020-2830" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2830.html" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.6.10" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.10-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.6.10-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">7e67f1e7a7fb5b766579f6ff5cd9e06fe89cf659cdcd7cfcae5b06a6ac18f104</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.6.10" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.10-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.6.10-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">6aab3f2704c75e829410a3e76fb90b6d1ca4b708fd6c894cb245fb324de67b05</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.6.10" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.10-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.6.10-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">b2fc6c228f38d85c46058b8f3dfeea3f532c833c6c16babf2920b0b7f8cbbc7f</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.6.10" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.10-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.6.10-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">e06991b9a0ce0110486880f7d3eef65b6b387f0f9c12683a305559fa2c30ecd8</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.6.10" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.10-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.6.10-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">ef0c08458dc99fc456e86f0e7cd2c11ac323b5e1ea5b920f432a9f553bf92505</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.6.10" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.10-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.6.10-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">e41a93fd250ee9cf94b2dc6451521bfc94b9a2cf45200c651dc433a78dfcf2ae</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.6.10" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.10-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.6.10-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">8c9e6e05126084c0123054376b7eb31d2478c318f93102f0958399045c3e248a</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.6.10" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.10-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.6.10-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">295b76674e9d4ced16f335b134938a91b73bc47380320869e86a265d3dc9098c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="2" from="release-engineering@redhat.com">
    <id>RHSA-2025:2615</id>
    <issued date="2025-03-11 00:05:58 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2025 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP40.

Security Fix(es):

* CVE-2025-21502

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2025-03-11 00:05:58 UTC" />
    <references>
      <reference id="RHSA-2025:2615" title="RHSA-2025:2615" type="self" href="https://access.redhat.com/errata/RHSA-2025:2615" />
      <reference id="CVE-2025-21502" title="CVE-2025-21502" type="cve" href="https://access.redhat.com/security/cve/CVE-2025-21502" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm" version="1.8.0.8.40" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.40-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.40-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bae66ccdb23614300ecf1d7fb4ed0ec31e13848a9bb9674e9e1de21b08830604</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.40" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.40-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.40-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3d9ee78797b254ec55f51c6a8ab1b1f609a1a8204f0850e9710c1187d06977f9</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.40" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.40-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.40-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0742420f702bed1b385f8d620a66445e455581e9b4301c5aeae4a27b4a21dfe9</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.40" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.40-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.40-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5fa93a5dd4967bc657fddeb11203ab1a6b385d38c65ff6cc1d46e1cf12834830</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.40" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.40-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.40-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1e18c52644a5f10bed6ef0e10485480066a54e542ebe08b8a641935078547401</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.40" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.40-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.40-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">32b0117a329b32b9d4d32e6125d14d15288e07e0656ddea95a615804357b53fa</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.40" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.40-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.40-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4179e12af39ba19f142f1f7783c7a94db8a8a31843be33225e023b5ee4191061</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.40" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.40-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.40-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f8a10496792cf25170f23c25291e68db2d6f77b19491784a9fffaf6d290dce27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="2" from="release-engineering@redhat.com">
    <id>RHSA-2023:0128</id>
    <issued date="2023-01-12 08:29:37 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2023 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR7-FP20.

Security Fix(es):

* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)

* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)

* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)

* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2023-01-12 08:29:37 UTC" />
    <references>
      <reference id="RHSA-2023:0128" title="RHSA-2023:0128" type="self" href="https://access.redhat.com/errata/RHSA-2023:0128" />
      <reference id="2133745" title="CVE-2022-21619 OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2133745" />
      <reference id="2133753" title="CVE-2022-21626 OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2133753" />
      <reference id="2133765" title="CVE-2022-21624 OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2133765" />
      <reference id="2133769" title="CVE-2022-21628 OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2133769" />
      <reference id="CVE-2022-21619" title="CVE-2022-21619" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21619" />
      <reference id="CVE-2022-21624" title="CVE-2022-21624" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21624" />
      <reference id="CVE-2022-21626" title="CVE-2022-21626" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21626" />
      <reference id="CVE-2022-21628" title="CVE-2022-21628" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21628" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.7.20" release="1.el8_7" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.20-1.el8_7.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.7.20-1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">8b9bdc4eb9873f4d21fae3984103066e5672771fc0f1ec451b35442457035e6e</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.7.20" release="1.el8_7" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.20-1.el8_7.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.7.20-1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">25eb939029a9e5ca841776d2ae8f24b6839643d9e2cc5073579b3be5b38d2913</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.7.20" release="1.el8_7" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.20-1.el8_7.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.7.20-1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">deaaed83883bed18f11318c1e04901f102b46dc895dd282e19a3a1a262948945</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.7.20" release="1.el8_7" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.20-1.el8_7.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.7.20-1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">4a74d3beea766c1912820854fb1b8ecae6f9443ccc40231e7b00c0adcb948ac2</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.7.20" release="1.el8_7" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.20-1.el8_7.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.7.20-1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">38d4262c2cbb881b88182f22b9a058c343c7a9db3cc339592146ebbf6a0caadd</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.7.20" release="1.el8_7" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.20-1.el8_7.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.7.20-1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">5273f013497055434fabe784514253d036e5784fde15f4e56ea76b2ffcbf2a61</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.7.20" release="1.el8_7" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.20-1.el8_7.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.7.20-1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">65ae4aa94f330a95372e7f1896a889571af79163bb2b90f235d9b30b0997c6cb</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.7.20" release="1.el8_7" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.20-1.el8_7.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.7.20-1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">8dd900e25a7b9cbe2810289fa4528ff9fe942be0519f96b38ff2d5e9751d12f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2025:13675</id>
    <issued date="2025-08-12 08:31:00 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2025 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>1</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP50.

Security Fix(es):

* CVE-2025-30749
* CVE-2025-30754
* CVE-2025-30761
* CVE-2025-50106

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2025-08-12 08:31:00 UTC" />
    <references>
      <reference id="RHSA-2025:13675" title="RHSA-2025:13675" type="self" href="https://access.redhat.com/errata/RHSA-2025:13675" />
      <reference id="CVE-2025-30749" title="CVE-2025-30749" type="cve" href="https://access.redhat.com/security/cve/CVE-2025-30749" />
      <reference id="CVE-2025-30754" title="CVE-2025-30754" type="cve" href="https://access.redhat.com/security/cve/CVE-2025-30754" />
      <reference id="CVE-2025-30761" title="CVE-2025-30761" type="cve" href="https://access.redhat.com/security/cve/CVE-2025-30761" />
      <reference id="CVE-2025-50106" title="CVE-2025-50106" type="cve" href="https://access.redhat.com/security/cve/CVE-2025-50106" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.50" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.50-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.50-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">90f9607c52d1fad9efaa749c0ac025283a054c8a8ba43b09b05fed1aba2a6c9e</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.50" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.50-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.50-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1084254388aa4db1083f4dbce61bb1518333e0e89402d4952786a99df85a117d</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.50" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.50-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.50-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2e2105f33805e6dba5cf96cbd862e2f8658799f4f6633d0092b56a1dbf3908c2</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.50" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.50-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.50-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f9815722803084f4979a44b220e3b893100b6241afa5a68c2d3a218b1d13c894</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.50" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.50-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.50-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8d9856ab41cb2c4763df309842bed1265590a231785e65fc1e142688501fb221</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.50" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.50-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.50-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">24cc704479c0f2ca7615e837581a572fc8a15b2326115ceadddf135f6534b685</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.50" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.50-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.50-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cc2e070ef8374b920aaf61dfb096b13d61d5b3e7b5e3740194714788fee80fa4</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.50" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.50-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.50-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8d0f3d56b37f8154e0732160839f6a68cd3ff02169121861b1e1422963b002bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="release-engineering@redhat.com">
    <id>RHEA-2019:1963</id>
    <issued date="2019-07-30 09:20:39 UTC" />
    <title>zhongyi-song-fonts enhancement update</title>
    <release>0</release>
    <rights>Copyright 2019 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>None</severity>
    <summary>An update for zhongyi-song-fonts is now available for Red Hat Enterprise Linux 8.</summary>
    <pushcount>2</pushcount>
    <description>Enhnancement(s):

* Package request: add zhongyi-song-fonts to Supplementary (BZ#1638351)</description>
    <updated date="2019-07-30 09:20:39 UTC" />
    <references>
      <reference id="RHEA-2019:1963" title="RHEA-2019:1963" type="self" href="https://access.redhat.com/errata/RHEA-2019:1963" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="zhongyi-song-fonts" version="0.1.20020329.1" release="17.el8" epoch="0" arch="noarch" src="zhongyi-song-fonts-0.1.20020329.1-17.el8.src.rpm">
          <filename>zhongyi-song-fonts-0.1.20020329.1-17.el8.noarch.rpm</filename>
          <sum type="sha256">9247a543b485b801e7510351724c61b5d82fe82e8ef3b5f08b05717f389b6dfa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2020:0465</id>
    <issued date="2020-02-11 03:46:45 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2020 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR6-FP5.

Security Fix(es):

* OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422) (CVE-2020-2604)

* OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548) (CVE-2020-2593)

* OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909) (CVE-2020-2583)

* OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795) (CVE-2020-2659)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2020-02-11 03:46:45 UTC" />
    <references>
      <reference id="RHSA-2020:0465" title="RHSA-2020:0465" type="self" href="https://access.redhat.com/errata/RHSA-2020:0465" />
      <reference id="1790444" title="CVE-2020-2583 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1790444" />
      <reference id="1790884" title="CVE-2020-2593 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1790884" />
      <reference id="1790944" title="CVE-2020-2604 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1790944" />
      <reference id="1791284" title="CVE-2020-2659 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1791284" />
      <reference id="CVE-2020-2583" title="CVE-2020-2583" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2583.html" />
      <reference id="CVE-2020-2593" title="CVE-2020-2593" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2593.html" />
      <reference id="CVE-2020-2604" title="CVE-2020-2604" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2604.html" />
      <reference id="CVE-2020-2659" title="CVE-2020-2659" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2659.html" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.6.5" release="1.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.5-1.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.6.5-1.el8_1.x86_64.rpm</filename>
          <sum type="sha256">37a3c0ef7ee1961703f6b0636550cf59ee5eb5195e9b15fc59bb811a1d59350c</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.6.5" release="1.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.5-1.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.6.5-1.el8_1.x86_64.rpm</filename>
          <sum type="sha256">524b172ca3f2e37167b79a6b28038d5020bd165acd6f291a8ef5623f6e07a27a</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.6.5" release="1.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.5-1.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.6.5-1.el8_1.x86_64.rpm</filename>
          <sum type="sha256">8c2cc6d3c45ad328ce00fc0fa074a122d53b2abee8d2574c130ce98d2b0b7b30</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.6.5" release="1.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.5-1.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.6.5-1.el8_1.x86_64.rpm</filename>
          <sum type="sha256">b76f5f96a6a2e1dc17191d755dc4add4764fcaf1991f0f83e1253bbbdfaceec0</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.6.5" release="1.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.5-1.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.6.5-1.el8_1.x86_64.rpm</filename>
          <sum type="sha256">444055f93dc8d2b273ff4333aff39891e4ab8e3599bc465304d3990a504fb721</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.6.5" release="1.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.5-1.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.6.5-1.el8_1.x86_64.rpm</filename>
          <sum type="sha256">7bde1a673002089664d59795cdbc82406890d9e8678c150ba6d8439088aad7e2</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.6.5" release="1.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.5-1.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.6.5-1.el8_1.x86_64.rpm</filename>
          <sum type="sha256">ac4b0537b28fa5329a7c001cde57ced97ccb9b753c528eec4030968f533afb43</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.6.5" release="1.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.5-1.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.6.5-1.el8_1.x86_64.rpm</filename>
          <sum type="sha256">b50ddd422dd82f9afeea710cc428c0f457d91190b4db79cbd31a91095636d71f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="release-engineering@redhat.com">
    <id>RHEA-2019:1997</id>
    <issued date="2019-07-30 14:18:23 UTC" />
    <title>virtio-win bug fix and enhancement update</title>
    <release>0</release>
    <rights>Copyright 2019 Red Hat Inc</rights>
    <solution>For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>None</severity>
    <summary>An update for virtio-win is now available for Red Hat Enterprise Linux 8.</summary>
    <pushcount>2</pushcount>
    <description>The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware drivers used by fully virtualized guests running on Red Hat Enterprise Linux. Fully virtualized guests using the paravirtualized drivers gain significantly better I/O performance than fully virtualized guests running without the drivers. 

Users of virtio-win are advised to upgrade to these updated packages.</description>
    <updated date="2019-07-30 14:18:23 UTC" />
    <references>
      <reference id="RHEA-2019:1997" title="RHEA-2019:1997" type="self" href="https://access.redhat.com/errata/RHEA-2019:1997" />
      <reference id="1223668" title="[RFE] add a directory structure allowing windows automatically finding drivers" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1223668" />
      <reference id="1428641" title="[virtio-win][viostor]Windows guest's physical block size change to &quot;512&quot; after installation with the size &quot;4096&quot;" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1428641" />
      <reference id="1517107" title="[q35] guest NIC interface still exists after hotunplug virtio-net-pci device" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1517107" />
      <reference id="1537430" title="[NetKVM] Support setting link speed and duplex settings from QEMU" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1537430" />
      <reference id="1656266" title="[virtio-win][balloon] balloon device hot-unplug fail if balloon service is running" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1656266" />
      <reference id="1666940" title='[virtio-win][netkvm] cannot get valid ip when boot guest with "vectors=1"' type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1666940" />
      <reference id="1672541" title="virtio-win drivers build with Visual Studio 2017" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1672541" />
      <reference id="1691209" title="[virtio-win][netkvm+viostor]Job ”Static Tools Logo Test“ failed with build 169" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1691209" />
      <reference id="1694509" title="Update license of virtio-win" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1694509" />
      <reference id="1702888" title="[virtio-win][whql][netkvm]Job StandardizedKeywords failed on Win1032/64-1903" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1702888" />
      <reference id="1716248" title='[virtio-win][netkvm] can not ping out when boot with "queues=4,vectors=5/6/7/8" on win7 and win2008r2' type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1716248" />
      <reference id="ref_0" title="other_reference_0" type="other" href="REFERENCES" />
      <reference id="ref_1" title="other_reference_1" type="other" href="TEMPLATE" />
      <reference id="ref_2" title="other_reference_2" type="other" href="CAN" />
      <reference id="ref_3" title="other_reference_3" type="other" href="NOT" />
      <reference id="ref_4" title="other_reference_4" type="other" href="BE" />
      <reference id="ref_5" title="other_reference_5" type="other" href="FOUND" />
      <reference id="ref_6" title="other_reference_6" type="other" href="FOR" />
      <reference id="ref_7" title="other_reference_7" type="other" href="THIS" />
      <reference id="ref_8" title="other_reference_8" type="other" href="VERSION!" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="virtio-win" version="1.9.8" release="6.el8" epoch="0" arch="noarch" src="virtio-win-1.9.8-6.el8.src.rpm">
          <filename>virtio-win-1.9.8-6.el8.noarch.rpm</filename>
          <sum type="sha256">38ec008ffa9ed1ef73470fe6d4d89fbf9f5e77e03968600e0b789dd112bacb7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="3" from="release-engineering@redhat.com">
    <id>RHSA-2026:4832</id>
    <issued date="2026-03-17 19:03:01 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2026 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>3</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

Security Fix(es):

* openjdk: Improve JMX connections (Oracle CPU 2026-01) (CVE-2026-21925)

* openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01) (CVE-2026-21933)

* openjdk: Enhance Certificate Checking (Oracle CPU 2026-01) (CVE-2026-21945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2026-03-17 19:03:01 UTC" />
    <references>
      <reference id="RHSA-2026:4832" title="RHSA-2026:4832" type="self" href="https://access.redhat.com/errata/RHSA-2026:4832" />
      <reference id="2429924" title="CVE-2026-21925 openjdk: Improve JMX connections (Oracle CPU 2026-01)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2429924" />
      <reference id="2429926" title="CVE-2026-21933 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2429926" />
      <reference id="2429927" title="CVE-2026-21945 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2429927" />
      <reference id="CVE-2026-21925" title="CVE-2026-21925" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-21925" />
      <reference id="CVE-2026-21933" title="CVE-2026-21933" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-21933" />
      <reference id="CVE-2026-21945" title="CVE-2026-21945" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-21945" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.60" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.60-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.60-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5a1b370908b5b0dfa907c6297ef0e2fda35735f85a06d97da67a3a18e9436a2b</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.60" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.60-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.60-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">527cbecbccad2d955407e9510aefb3513f04f22c288a03c9f2dc31a77cae4287</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.60" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.60-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.60-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6e7264dbbacc614a1a1c4ab8a9910ab46ec7c43ee1dccd48bbb0dce4abad6775</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.60" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.60-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.60-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">95075f9955351fd26fa596707d3c86682a487dcff52af5facbed236250257c8b</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.60" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.60-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.60-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">14c91c223561e3d95ff8ccf5cc557e3ecc05b78d6f0cf3a802fbcde0acdf811d</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.60" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.60-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.60-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7b5828e4eec18453183649f33be173af4dac7e74edad265af16bcf4c2b338f5d</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.60" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.60-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.60-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">584a18c95217662930dfc26f61cf1e6cde921971151ba9582c8662e845d222ee</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.60" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.60-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.60-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f126af67f5424b8e69301d7b2a7873e0b3abc899addfe1c3301f676f1bd97ce2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="3" from="release-engineering@redhat.com">
    <id>RHSA-2024:10926</id>
    <issued date="2024-12-10 16:52:32 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2024 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>3</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP15.

Security Fix(es):

* CVE-2024-21208
* CVE-2024-21210
* CVE-2024-21217
* CVE-2024-21235

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2024-12-10 16:52:32 UTC" />
    <references>
      <reference id="RHSA-2024:10926" title="RHSA-2024:10926" type="self" href="https://access.redhat.com/errata/RHSA-2024:10926" />
      <reference id="CVE-2024-21208" title="CVE-2024-21208" type="cve" href="https://access.redhat.com/security/cve/CVE-2024-21208" />
      <reference id="CVE-2024-21210" title="CVE-2024-21210" type="cve" href="https://access.redhat.com/security/cve/CVE-2024-21210" />
      <reference id="CVE-2024-21217" title="CVE-2024-21217" type="cve" href="https://access.redhat.com/security/cve/CVE-2024-21217" />
      <reference id="CVE-2024-21235" title="CVE-2024-21235" type="cve" href="https://access.redhat.com/security/cve/CVE-2024-21235" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.35" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.35-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.35-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4f3161bdec91185bb3c91c9f81b32805bcb3aa57ee5c1dafe6a18ab1499355e5</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.35" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.35-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.35-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bc8b1bd949a959cb885b0ce3535976b2640a5e2bcece6a8bd43c5899eecf22ba</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.35" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.35-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.35-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e2045f7f20effbb8f954447fec13efdd2e341d7513cb084a28ac854fd9e33c0d</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.35" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.35-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.35-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7c4dcf470fe1a58df32ef33d039963c1753fc12b5b08291ebf73533c6357235d</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.35" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.35-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.35-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c3b8f2a54e0759ee6f80f33ed848c8855ef53040f2b17c19e8a24ac9ee2c502b</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.35" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.35-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.35-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">640e85c0c2f34dce3f2338bc3ca72a9d31ab07120586972fd60cef5758fc9232</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.35" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.35-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.35-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5461837a9791f520f2f9b256b846deed7da7ae26c1b40e88cf4b3ffbdaf4a185</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.35" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.35-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.35-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3287e9830ab4d805d4afcd1b9a835cb733bbc8c1df0f63d73fd4e7b6103dc897</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2021:0736</id>
    <issued date="2021-03-04 17:36:10 UTC" />
    <title>Critical: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2021 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Critical</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>3</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR6-FP25.

Security Fix(es):

* IBM JDK: Stack-based buffer overflow when converting from UTF-8 characters to platform encoding (CVE-2020-27221)

* OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415) (CVE-2020-2773)

* OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990) (CVE-2020-14781)

* OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995) (CVE-2020-14782)

* OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136) (CVE-2020-14803)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2021-03-04 17:36:10 UTC" />
    <references>
      <reference id="RHSA-2021:0736" title="RHSA-2021:0736" type="self" href="https://access.redhat.com/errata/RHSA-2021:0736" />
      <reference id="1823224" title="CVE-2020-2773 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1823224" />
      <reference id="1889274" title="CVE-2020-14781 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1889274" />
      <reference id="1889290" title="CVE-2020-14782 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1889290" />
      <reference id="1889895" title="CVE-2020-14803 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1889895" />
      <reference id="1928555" title="CVE-2020-27221 IBM JDK: Stack-based buffer overflow when converting from UTF-8 characters to platform encoding" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1928555" />
      <reference id="CVE-2020-2773" title="CVE-2020-2773" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2773.html" />
      <reference id="CVE-2020-14781" title="CVE-2020-14781" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14781.html" />
      <reference id="CVE-2020-14782" title="CVE-2020-14782" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14782.html" />
      <reference id="CVE-2020-14803" title="CVE-2020-14803" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14803.html" />
      <reference id="CVE-2020-27221" title="CVE-2020-27221" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-27221.html" />
      <reference id="classification" title="critical" type="other" href="https://access.redhat.com/security/updates/classification/#critical" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.6.25" release="2.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.25-2.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.6.25-2.el8_3.x86_64.rpm</filename>
          <sum type="sha256">9162e0c52ba9e7a59c69b8145e1560663b94ddd4ad242a338ae9235be4a4bbfe</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.6.25" release="2.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.25-2.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.6.25-2.el8_3.x86_64.rpm</filename>
          <sum type="sha256">7f8d0768b1a380cddf64f45ccde22e8148560ad79193f905399569e605cb7c03</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.6.25" release="2.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.25-2.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.6.25-2.el8_3.x86_64.rpm</filename>
          <sum type="sha256">f6fbdb343ade88aebec78046a9490e1013447646e59f494334318b366ea58ecd</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.6.25" release="2.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.25-2.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.6.25-2.el8_3.x86_64.rpm</filename>
          <sum type="sha256">d5480580c9fd34544c7a3b1ed5daf70ccf0945cb74a3bf94cc54dab87d3fecdb</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.6.25" release="2.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.25-2.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.6.25-2.el8_3.x86_64.rpm</filename>
          <sum type="sha256">6f9ed8305dbd4cac293d4100ce2c8c546ea0df85c67683f8272802a19729c01f</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.6.25" release="2.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.25-2.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.6.25-2.el8_3.x86_64.rpm</filename>
          <sum type="sha256">4e7b6398074d00f020ccd9624929ba1d9fa2a3cfed2962241da209f88ed2d2a2</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.6.25" release="2.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.25-2.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.6.25-2.el8_3.x86_64.rpm</filename>
          <sum type="sha256">796d3871ca0f63d2899cd70c0a584bbe15de4071ef892a3d0fdf3c9da5098115</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.6.25" release="2.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.25-2.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.6.25-2.el8_3.x86_64.rpm</filename>
          <sum type="sha256">f8a73d20b909c52e958122ad2d0b4671e5c722ff52d3f67ab6703518e59a4fd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2021:4089</id>
    <issued date="2021-11-02 10:12:27 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2021 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR6-FP35.

Security Fix(es):

* OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host (Networking, 8258432) (CVE-2021-2341)

* OpenJDK: Incorrect verification of JAR files with multiple MANIFEST.MF files (Library, 8260967) (CVE-2021-2369)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2021-11-02 10:12:27 UTC" />
    <references>
      <reference id="RHSA-2021:4089" title="RHSA-2021:4089" type="self" href="https://access.redhat.com/errata/RHSA-2021:4089" />
      <reference id="1982874" title="CVE-2021-2341 OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host (Networking, 8258432)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1982874" />
      <reference id="1982879" title="CVE-2021-2369 OpenJDK: Incorrect verification of JAR files with multiple MANIFEST.MF files (Library, 8260967)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1982879" />
      <reference id="CVE-2021-2341" title="CVE-2021-2341" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2021-2341.html" />
      <reference id="CVE-2021-2369" title="CVE-2021-2369" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2021-2369.html" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.6.35" release="1.el8_4" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.35-1.el8_4.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.6.35-1.el8_4.x86_64.rpm</filename>
          <sum type="sha256">3170c3025ea60c971103022cc2e1e336ed4a91f4501a0930569d3924fc400f05</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.6.35" release="1.el8_4" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.35-1.el8_4.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.6.35-1.el8_4.x86_64.rpm</filename>
          <sum type="sha256">ffc2317eb1876a57861bf8e4d6379021931fa48a236e5eedb37a4e383658b9fe</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.6.35" release="1.el8_4" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.35-1.el8_4.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.6.35-1.el8_4.x86_64.rpm</filename>
          <sum type="sha256">0885471280a1a2ef40c623daea6e542bb47c50bfd29c6773c843847b6b735a37</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.6.35" release="1.el8_4" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.35-1.el8_4.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.6.35-1.el8_4.x86_64.rpm</filename>
          <sum type="sha256">92e53057924e9fb53568811439129ef880716c9b3befd24e9e930acd6aeb1a32</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.6.35" release="1.el8_4" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.35-1.el8_4.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.6.35-1.el8_4.x86_64.rpm</filename>
          <sum type="sha256">f4b781a447beaaadae984c66a40a8e350677ffdb1017b2354b7062cef522ea30</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.6.35" release="1.el8_4" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.35-1.el8_4.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.6.35-1.el8_4.x86_64.rpm</filename>
          <sum type="sha256">57498091dcf3dca9c6eab35dd7e29a2cd2f634499f7552a06b230d8a086db74b</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.6.35" release="1.el8_4" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.35-1.el8_4.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.6.35-1.el8_4.x86_64.rpm</filename>
          <sum type="sha256">5da5eb6d15a8993ca7dce932b1443f8277f4dddf681bf5d599c9cc37ff6d5e32</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.6.35" release="1.el8_4" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.35-1.el8_4.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.6.35-1.el8_4.x86_64.rpm</filename>
          <sum type="sha256">c043b5d991449ebdf8482f50424965cf5b84a89fa24318f327fc331a6c0ed0c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="3" from="release-engineering@redhat.com">
    <id>RHSA-2024:1481</id>
    <issued date="2024-03-25 18:07:05 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2024 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP15.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2024-03-25 18:07:04 UTC" />
    <references>
      <reference id="RHSA-2024:1481" title="RHSA-2024:1481" type="self" href="https://access.redhat.com/errata/RHSA-2024:1481" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
      <reference id="CVE-2024-20918" title="CVE-2024-20918" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2024-20918.html" />
      <reference id="CVE-2024-20921" title="CVE-2024-20921" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2024-20921.html" />
      <reference id="CVE-2024-20926" title="CVE-2024-20926" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2024-20926.html" />
      <reference id="CVE-2024-20945" title="CVE-2024-20945" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2024-20945.html" />
      <reference id="CVE-2024-20952" title="CVE-2024-20952" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2024-20952.html" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.20" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.20-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.20-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">73fe9d27deb62f441be299de6c88edcf5010e942d6e88e663a851525e0071295</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.20" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.20-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.20-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">9b8a3cc7317be9ca4385a8cea76f04397565245434feb29e02c785c31abda759</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.20" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.20-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.20-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">a4d06c5ae420445683a2adcc2012b6eb347a019e0bcfd17cfa954b922b130cf2</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.20" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.20-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.20-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">78321a0de7060ad85b8155bdb7119e980d24928d99d03bf6633cd988bf2d8f79</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.20" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.20-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.20-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">35b9c4ff4b06ec80fabd372abc8c5aa0213618f206d88296ed485ea195a341ee</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.20" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.20-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.20-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">b18d0258b2cbdf2ff00ec43f75089b206572436cb1676708dca04d6c82a59f77</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.20" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.20-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.20-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">7405f04ba6e208b64eb4af8bdb32e4547bdbf6f924befd418284e99db1bea3fa</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.20" release="1.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.20-1.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.20-1.el8_9.x86_64.rpm</filename>
          <sum type="sha256">cab55657072ab0b1dd3c85feff04fd63c8ecc3326740e0362546bbc93bea1893</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2019:1238</id>
    <issued date="2019-05-16 13:21:36 UTC" />
    <title>Critical: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2019 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Critical</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>3</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR5-FP35.

Security Fix(es):

* IBM JDK: buffer overflow in jio_snprintf() and jio_vsnprintf() (CVE-2018-12547)

* IBM JDK: missing null check when accelerating Unsafe calls (CVE-2018-12549)

* Oracle JDK: Unspecified vulnerability fixed in 7u221 and 8u211 (2D) (CVE-2019-2697)

* OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022) (CVE-2019-2698)

* OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290) (CVE-2019-2422)

* OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936) (CVE-2019-2602)

* OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453) (CVE-2019-2684)

* IBM JDK: Read beyond the end of bytecode array causing JVM crash (CVE-2019-10245)

* libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c (CVE-2018-11212)

* Oracle JDK: unspecified vulnerability fixed in 8u201 (Deployment) (CVE-2019-2449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2019-05-16 13:21:36 UTC" />
    <references>
      <reference id="RHSA-2019:1238" title="RHSA-2019:1238" type="self" href="https://access.redhat.com/errata/RHSA-2019:1238" />
      <reference id="1579973" title="CVE-2018-11212 libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1579973" />
      <reference id="1665945" title="CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1665945" />
      <reference id="1685601" title="CVE-2019-2449 Oracle JDK: unspecified vulnerability fixed in 8u201 (Deployment)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1685601" />
      <reference id="1685611" title="CVE-2018-12547 IBM JDK: buffer overflow in jio_snprintf() and jio_vsnprintf()" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1685611" />
      <reference id="1685717" title="CVE-2018-12549 IBM JDK: missing null check when accelerating Unsafe calls" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1685717" />
      <reference id="1700440" title="CVE-2019-2602 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1700440" />
      <reference id="1700447" title="CVE-2019-2698 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1700447" />
      <reference id="1700564" title="CVE-2019-2684 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1700564" />
      <reference id="1704480" title="CVE-2019-2697 Oracle JDK: Unspecified vulnerability fixed in 7u221 and 8u211 (2D)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1704480" />
      <reference id="1704799" title="CVE-2019-10245 IBM JDK: Read beyond the end of bytecode array causing JVM crash" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1704799" />
      <reference id="CVE-2018-11212" title="CVE-2018-11212" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2018-11212.html" />
      <reference id="CVE-2018-12547" title="CVE-2018-12547" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2018-12547.html" />
      <reference id="CVE-2018-12549" title="CVE-2018-12549" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2018-12549.html" />
      <reference id="CVE-2019-2422" title="CVE-2019-2422" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2422.html" />
      <reference id="CVE-2019-2449" title="CVE-2019-2449" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2449.html" />
      <reference id="CVE-2019-2602" title="CVE-2019-2602" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2602.html" />
      <reference id="CVE-2019-2684" title="CVE-2019-2684" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2684.html" />
      <reference id="CVE-2019-2697" title="CVE-2019-2697" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2697.html" />
      <reference id="CVE-2019-2698" title="CVE-2019-2698" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2698.html" />
      <reference id="CVE-2019-10245" title="CVE-2019-10245" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-10245.html" />
      <reference id="classification" title="critical" type="other" href="https://access.redhat.com/security/updates/classification/#critical" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-src" version="1.8.0.5.35" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.35-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.5.35-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">0acd32dbf1816319a167e18f9029bedd3d8969e4ae2b5d5e0fbb57231997f46d</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.5.35" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.35-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.5.35-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">477d42a8ebe0fb441e99c98672305a90bfdaa8e1170d12a78284202cd9633b49</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.5.35" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.35-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.5.35-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">254423804cc82af03fd5e76b6bde0b646d9cb67375fad1398af88fb702c5e4d7</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.5.35" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.35-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.5.35-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">765d22de418ba69c729ddbd312c318690e15645e0459cc26aedf759f385647ec</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.5.35" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.35-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.5.35-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">3458f1be6e38c5b4e46a5dd5c81391485e85bca4fbeae39802d6bf576c577dc7</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.5.35" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.35-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.5.35-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">c85ee51e1213aa19b57bb3e104297b56a34ee16486ea55e90f2afc82732aa511</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.5.35" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.35-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.5.35-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">b38e2cfeca8dae57c811e1625c402765df0d2ce719553678c0b20ab4af901b85</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.5.35" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.35-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.5.35-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">b9ff108a04cdc7d91ad472c0484a4e34a502bf022159f50639f6ea57005e4e79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="2" from="release-engineering@redhat.com">
    <id>RHSA-2026:52949</id>
    <issued date="2026-08-10 16:43:35 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2026 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

Security Fix(es):

* Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize (CVE-2026-41254)

* openjdk: Enhance TLS certificate handling (CVE-2026-46968)

* openjdk: Enhance JPEG handling (Oracle CPU 2026-07) (CVE-2026-47010)

* openjdk: Enhance XBM image support (Oracle CPU 2026-07) (CVE-2026-47021)

* openjdk: Enhance Jar file processing (Oracle CPU 2026-07) (CVE-2026-47027)

* openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07) (CVE-2026-47059)

* openjdk: Enhance Jar handling (Oracle CPU 2026-07) (CVE-2026-47063)

* openjdk: Improve Nashorn index handling (Oracle CPU 2026-07) (CVE-2026-47057)

* openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07) (CVE-2026-47058)

* openjdk: Improve certification checking (Oracle CPU 2026-07) (CVE-2026-60147)

* Eclipse Foundation OpenJ9: Eclipse OpenJ9: Buffer underflow via tracing method arguments (CVE-2026-16439)

* Eclipse OMR: Eclipse OMR: Denial of service via improper input validation in arraycmp SIMD (CVE-2026-16243)

* Eclipse Foundation OpenJ9: Eclipse OpenJ9: Incorrect method delegation can lead to integrity issues (CVE-2026-16441)

* java-1.8.0-ibm: Arbitrary class loading and instantiation via malicious IIOP server (CVE-2026-8400)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2026-08-10 16:43:35 UTC" />
    <references>
      <reference id="RHSA-2026:52949" title="RHSA-2026:52949" type="self" href="https://access.redhat.com/errata/RHSA-2026:52949" />
      <reference id="2459420" title="CVE-2026-41254 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2459420" />
      <reference id="2502751" title="CVE-2026-46968 openjdk: Enhance TLS certificate handling" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2502751" />
      <reference id="2502783" title="CVE-2026-47010 openjdk: Enhance JPEG handling (Oracle CPU 2026-07)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2502783" />
      <reference id="2502784" title="CVE-2026-47021 openjdk: Enhance XBM image support (Oracle CPU 2026-07)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2502784" />
      <reference id="2502791" title="CVE-2026-47027 openjdk: Enhance Jar file processing (Oracle CPU 2026-07)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2502791" />
      <reference id="2502792" title="CVE-2026-47059 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2502792" />
      <reference id="2502793" title="CVE-2026-47063 openjdk: Enhance Jar handling (Oracle CPU 2026-07)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2502793" />
      <reference id="2502794" title="CVE-2026-47057 openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2502794" />
      <reference id="2502795" title="CVE-2026-47058 openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2502795" />
      <reference id="2503636" title="CVE-2026-60147 openjdk: Improve certification checking (Oracle CPU 2026-07)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2503636" />
      <reference id="2503798" title="CVE-2026-16439 Eclipse Foundation OpenJ9: Eclipse OpenJ9: Buffer underflow via tracing method arguments" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2503798" />
      <reference id="2503988" title="CVE-2026-16243 Eclipse OMR: Eclipse OMR: Denial of service via improper input validation in arraycmp SIMD" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2503988" />
      <reference id="2503992" title="CVE-2026-16441 Eclipse Foundation OpenJ9: Eclipse OpenJ9: Incorrect method delegation can lead to integrity issues" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2503992" />
      <reference id="2512497" title="CVE-2026-8400 java-1.8.0-ibm: Arbitrary class loading and instantiation via malicious IIOP server" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2512497" />
      <reference id="CVE-2026-8400" title="CVE-2026-8400" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-8400" />
      <reference id="CVE-2026-16243" title="CVE-2026-16243" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-16243" />
      <reference id="CVE-2026-16439" title="CVE-2026-16439" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-16439" />
      <reference id="CVE-2026-16441" title="CVE-2026-16441" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-16441" />
      <reference id="CVE-2026-41254" title="CVE-2026-41254" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-41254" />
      <reference id="CVE-2026-46968" title="CVE-2026-46968" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-46968" />
      <reference id="CVE-2026-47010" title="CVE-2026-47010" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-47010" />
      <reference id="CVE-2026-47021" title="CVE-2026-47021" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-47021" />
      <reference id="CVE-2026-47027" title="CVE-2026-47027" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-47027" />
      <reference id="CVE-2026-47057" title="CVE-2026-47057" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-47057" />
      <reference id="CVE-2026-47058" title="CVE-2026-47058" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-47058" />
      <reference id="CVE-2026-47059" title="CVE-2026-47059" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-47059" />
      <reference id="CVE-2026-47063" title="CVE-2026-47063" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-47063" />
      <reference id="CVE-2026-60147" title="CVE-2026-60147" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-60147" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.70" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.70-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.70-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d116d37f9d50e4fb3722b73ce6e698af6999e98762a96fba56e113a13756bd30</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.70" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.70-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.70-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">dad0c1db2ad71da3f6b3b4372822558e24b3f77332fbe86c03948be47c9370c5</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.70" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.70-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.70-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b4c15513e24051245d7022ac31b0d28ab7ea230630ae4ade754c97da8129ebad</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.70" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.70-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.70-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">79175d7c22c8c48f47ef8ca693a92c36de75841f51b06652a20eb48558ec80bc</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.70" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.70-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.70-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7e95b51e7e11bc2f625f19aa83eda0fdf593f7a7b80ea865d0045c6b0860b2b6</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.70" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.70-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.70-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ec3f7d68240338f329bb101d8313cf30ed6c195e6842a1927fabd535f52cd6d6</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.70" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.70-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.70-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a09eb76d348de8afc84b88911e9b52e5cc9e24770c89d57fd883317af122cab6</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.70" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.70-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.70-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c5848a31b36e2e96324ab4bbaafee454605669ed9bd34a7f75f57a887d3b6119</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="3" from="release-engineering@redhat.com">
    <id>RHSA-2022:6735</id>
    <issued date="2022-10-25 07:58:21 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2022 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR7-FP15.

Security Fix(es):

* OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906) (CVE-2021-2163)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2022-10-25 07:58:21 UTC" />
    <references>
      <reference id="RHSA-2022:6735" title="RHSA-2022:6735" type="self" href="https://access.redhat.com/errata/RHSA-2022:6735" />
      <reference id="1951217" title="CVE-2021-2163 OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1951217" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
      <reference id="CVE-2021-2163" title="CVE-2021-2163" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2021-2163.html" />
      <reference id="CVE-2023-30441" title="CVE-2023-30441" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2023-30441.html" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.7.15" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.15-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.7.15-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">c421f6519d114adf01d24db5653134746b6668f3c24f410f4d960ed1b171ccd1</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.7.15" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.15-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.7.15-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">5f237f30267119900f9605fc36bcb1d3d03a352dfbc08f507b2f36d9198a2eb9</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.7.15" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.15-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.7.15-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">46b28d67e4336a4ba88cffd1055548845e65abd59c12dac5c7d62d25f1dcd09a</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.7.15" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.15-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.7.15-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">7a878ea924511c2dbd062f61b234d015a1f21dba29fde1ce8e20bfb0cf066096</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.7.15" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.15-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.7.15-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">d9ff070ba96597a23fda46f841eefda23f5b684819d371ab8ee666f8bee7ce55</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.7.15" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.15-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.7.15-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">32c17c65d3641a652b7b7328013be6a3c106a624bfbf9cbb535a2b9451eebc9c</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.7.15" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.15-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.7.15-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">760a907c6e5970718b3f5a27410320a2a1bccbcb74e591f76a0e97871181dba5</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.7.15" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.15-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.7.15-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">92dc4f502cd4490dd18f613fa5450c9b6edac2554248c190d107d406feaa61eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2021:0530</id>
    <issued date="2021-02-16 07:30:57 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2021 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR6-FP20.

Security Fix(es):

* OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685) (CVE-2020-14797)

* OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862) (CVE-2020-14779)

* OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680) (CVE-2020-14796)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2021-02-16 07:30:57 UTC" />
    <references>
      <reference id="RHSA-2021:0530" title="RHSA-2021:0530" type="self" href="https://access.redhat.com/errata/RHSA-2021:0530" />
      <reference id="1889271" title="CVE-2020-14779 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1889271" />
      <reference id="1889697" title="CVE-2020-14796 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1889697" />
      <reference id="1889717" title="CVE-2020-14797 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1889717" />
      <reference id="CVE-2020-14779" title="CVE-2020-14779" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14779.html" />
      <reference id="CVE-2020-14796" title="CVE-2020-14796" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14796.html" />
      <reference id="CVE-2020-14797" title="CVE-2020-14797" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14797.html" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-src" version="1.8.0.6.20" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.20-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.6.20-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">9b902d25d71bcfe2c7bf4f787a9a15f971389d18e30777ab2d6629d1cf2f851f</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.6.20" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.20-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.6.20-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">200660ec25036532dee9522372a95a6a00ad0bc6ccb7fa899b6a0d0d879630eb</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.6.20" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.20-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.6.20-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">03d1f71fac748304f1332a6ab4a750be17d112acc85d6fda4feab5d34a48d1f6</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.6.20" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.20-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.6.20-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">1935291c91de76cfa73b9a352e6e577037a634e1da6d12e88151ed146a1235d0</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.6.20" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.20-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.6.20-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">6bc9cdd69afafa2ba6e734e515b92466af2b17ff6ee25eb2a3486142d518dbcb</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.6.20" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.20-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.6.20-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">4907e8745a29ec5b95c17ad11cf3e886a8d43893c78043afdc08156f8b0ef3c5</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.6.20" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.20-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.6.20-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">3228be8a069e09ee5ce367493ddd9a1ad1237c7a52a6c08dfc3a9a592ebf92be</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.6.20" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.20-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.6.20-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">b740bd332561a12355c4795efb9d6c361ccff1e648278554eff11fb7df47a088</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="3" from="release-engineering@redhat.com">
    <id>RHBA-2024:1221</id>
    <issued date="2024-03-07 13:47:59 UTC" />
    <title>java-1.8.0-ibm bug fix</title>
    <release>0</release>
    <rights>Copyright 2024 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>None</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>3</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR7-FP20.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2024-03-07 13:47:58 UTC" />
    <references>
      <reference id="RHBA-2024:1221" title="RHBA-2024:1221" type="self" href="https://access.redhat.com/errata/RHBA-2024:1221" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.15" release="3.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-3.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.15-3.el8_9.x86_64.rpm</filename>
          <sum type="sha256">df0bae073cc1fb9309b9df8a6942543835f05d8edb240aa574e96f24ecfc92f8</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.15" release="3.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-3.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.15-3.el8_9.x86_64.rpm</filename>
          <sum type="sha256">e58c7db2fa33d05f2873725c3d07853aac6582e010c6a66522412363154750f6</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.15" release="3.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-3.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.15-3.el8_9.x86_64.rpm</filename>
          <sum type="sha256">1d5b68c8324c1053fa4cc8445009f43a58eed9a655794fdbb6a533cc163d39ec</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.15" release="3.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-3.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.15-3.el8_9.x86_64.rpm</filename>
          <sum type="sha256">c36201c0cadb8575eaa4752ecdf7685c29d30afb059f70dea158ea893f534781</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.15" release="3.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-3.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.15-3.el8_9.x86_64.rpm</filename>
          <sum type="sha256">bfe5bcc7f3640a89a63da83791d9983a28503f8dbfafb7a7fca658fcf9775e37</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.15" release="3.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-3.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.15-3.el8_9.x86_64.rpm</filename>
          <sum type="sha256">a379d5404b9ac83390d4de55f6a57eaf2088b0126fd634d755a71d689de95d1a</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.15" release="3.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-3.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.15-3.el8_9.x86_64.rpm</filename>
          <sum type="sha256">1f8bb9ead9f351f44a48fcc779548984e6372b7868502047b733dae1fe2bf381</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.15" release="3.el8_9" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.15-3.el8_9.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.15-3.el8_9.x86_64.rpm</filename>
          <sum type="sha256">a895fb8b1a2aa87afa752b553c404a2458f99515d956279935ec5e5a5f414a0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="4" from="release-engineering@redhat.com">
    <id>RHSA-2023:4103</id>
    <issued date="2023-07-17 08:09:49 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2023 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>3</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP5.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)

* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)

* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)

* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)

* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)

* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2023-07-17 08:09:49 UTC" />
    <references>
      <reference id="RHSA-2023:4103" title="RHSA-2023:4103" type="self" href="https://access.redhat.com/errata/RHSA-2023:4103" />
      <reference id="2187435" title="CVE-2023-21930 OpenJDK: improper connection handling during TLS handshake (8294474)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2187435" />
      <reference id="2187704" title="CVE-2023-21967 OpenJDK: certificate validation issue in TLS session negotiation (8298310)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2187704" />
      <reference id="2187724" title="CVE-2023-21939 OpenJDK: Swing HTML parsing issue (8296832)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2187724" />
      <reference id="2187758" title="CVE-2023-21938 OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2187758" />
      <reference id="2187790" title="CVE-2023-21937 OpenJDK: missing string checks for NULL characters (8296622)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2187790" />
      <reference id="2187802" title="CVE-2023-21968 OpenJDK: missing check for slash characters in URI-to-path conversion (8298667)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2187802" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
      <reference id="CVE-2022-40609" title="CVE-2022-40609" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2022-40609.html" />
      <reference id="CVE-2023-21930" title="CVE-2023-21930" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2023-21930.html" />
      <reference id="CVE-2023-21937" title="CVE-2023-21937" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2023-21937.html" />
      <reference id="CVE-2023-21938" title="CVE-2023-21938" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2023-21938.html" />
      <reference id="CVE-2023-21939" title="CVE-2023-21939" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2023-21939.html" />
      <reference id="CVE-2023-21967" title="CVE-2023-21967" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2023-21967.html" />
      <reference id="CVE-2023-21968" title="CVE-2023-21968" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2023-21968.html" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.5" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.5-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.5-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">993301a82933581a5f472f0b6eba3ef86341d07739771dcaf334677aaf663227</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.5" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.5-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.5-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">b078f1d0fd27daac7f8527c0fe3469950953aadc6c01845a3da3580472d5982b</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.5" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.5-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.5-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">256685424566f6c1e91cb2800964acaf5cebbd6c732d791c15487e2d5eac595a</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.5" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.5-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.5-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">07324baae014a07ba209507452c6d7a12d3b6dd165e9249033b728f397afee61</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.5" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.5-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.5-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">fb255d23986f975966515be1b39f04a6c177d3e70138917ca533e630fa766def</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.5" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.5-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.5-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">622ba38ef440f7ba389c9d98079f77e42bbe0ce9680ff1c8f2292e2aa8c55d1c</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.5" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.5-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.5-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">21bdb4572d8f65dab1aad7ef81d3de5e30443c186ad192e5d6a90265a1270b31</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.5" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.5-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.5-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">e9c00b8c0b3a3a2e2edac2d4103b79136d7aebe370a0d06e4c9940ae7d77747a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2019:2590</id>
    <issued date="2019-09-02 07:32:56 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2019 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR5-FP40.

Security Fix(es):

* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)

* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)

* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)

* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)

* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)

* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)

* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2019-09-02 07:32:56 UTC" />
    <references>
      <reference id="RHSA-2019:2590" title="RHSA-2019:2590" type="self" href="https://access.redhat.com/errata/RHSA-2019:2590" />
      <reference id="1672409" title="CVE-2019-7317 libpng: use-after-free in png_image_free in png.c" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1672409" />
      <reference id="1730056" title="CVE-2019-2769 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1730056" />
      <reference id="1730099" title="CVE-2019-2816 OpenJDK: Missing URL format validation (Networking, 8221518)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1730099" />
      <reference id="1730255" title="CVE-2019-2786 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1730255" />
      <reference id="1730415" title="CVE-2019-2762 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1730415" />
      <reference id="1738547" title="CVE-2019-11772 IBM JDK: Out-of-bounds access in the String.getBytes method" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1738547" />
      <reference id="1738549" title="CVE-2019-11775 IBM JDK: Failure to privatize a value pulled out of the loop by versioning" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1738549" />
      <reference id="CVE-2019-2762" title="CVE-2019-2762" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2762.html" />
      <reference id="CVE-2019-2769" title="CVE-2019-2769" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2769.html" />
      <reference id="CVE-2019-2786" title="CVE-2019-2786" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2786.html" />
      <reference id="CVE-2019-2816" title="CVE-2019-2816" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2816.html" />
      <reference id="CVE-2019-7317" title="CVE-2019-7317" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-7317.html" />
      <reference id="CVE-2019-11772" title="CVE-2019-11772" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-11772.html" />
      <reference id="CVE-2019-11775" title="CVE-2019-11775" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-11775.html" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.5.40" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.40-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.5.40-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">2eae57034a2227f12dde4b35cf4a78b2478aea18cf95ca6bb83fabb277be5cb0</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.5.40" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.40-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.5.40-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">ad37ea6c3956b459edaa5be1db5fb331a5ba561bb21c02acf385123cd7f3fa5d</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.5.40" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.40-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.5.40-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">0cbdbcc2e2605f0d942508b6ebcfe91b95f5a4cabcb9546551d3309b38cf099d</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.5.40" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.40-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.5.40-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">fa0b753796ec4a43ddc52a8ed47a432b43a6b3a5ada999aab8bdc5cefce57c36</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.5.40" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.40-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.5.40-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">57e6f8a33630b2660b983ecc1e03af012c1528aae608474a8cd33e8075308e4b</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.5.40" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.40-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.5.40-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">53ebf8fcaacf2a73cec9b332805d7ffc9865f1660f467bda2171711bdab188d5</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.5.40" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.40-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.5.40-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">81abd036a9b748bb3402c9fedf527e774d2f81ef5579ee8855d92f16ba1c70e4</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.5.40" release="3.el8_0" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.5.40-3.el8_0.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.5.40-3.el8_0.x86_64.rpm</filename>
          <sum type="sha256">406fdefc84138b51189da942a4685f0602777497f37e07c834de7865e07a8821</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="4" from="release-engineering@redhat.com">
    <id>RHSA-2025:8431</id>
    <issued date="2025-06-03 00:10:28 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2025 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>4</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP40.

Security Fix(es):

* CVE-2025-21587
* CVE-2025-30698
* CVE-2025-4447

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2025-06-03 00:10:28 UTC" />
    <references>
      <reference id="RHSA-2025:8431" title="RHSA-2025:8431" type="self" href="https://access.redhat.com/errata/RHSA-2025:8431" />
      <reference id="CVE-2025-4447" title="CVE-2025-4447" type="cve" href="https://access.redhat.com/security/cve/CVE-2025-4447" />
      <reference id="CVE-2025-21587" title="CVE-2025-21587" type="cve" href="https://access.redhat.com/security/cve/CVE-2025-21587" />
      <reference id="CVE-2025-30698" title="CVE-2025-30698" type="cve" href="https://access.redhat.com/security/cve/CVE-2025-30698" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.45" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.45-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.45-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8be6357434fc52d0e571ddc4718fa96a4315164063c0e3bb3ece30fa57e7da2e</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.45" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.45-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.45-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f3c8b15e1ea0e126f712e5eda350006c74ebfd80f9abf0e185bbd55c32204df2</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.45" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.45-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.45-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">04c126846769a537e4204c24bcd08caf0b15611960cdc5b7769ecce340313f41</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.45" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.45-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.45-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fd503beaa4c45a2959cafce6480e3696226a79608b4e67c6c1a89e3189d3d27d</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.45" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.45-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.45-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">770d22539e0411355771fcae11552f17558a89751cda3b78944e51515e0f7c20</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.45" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.45-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.45-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1655ae773b988e6e9c9c492c1626b3ba3cc1717be3842c5bf227b070d395d903</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.45" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.45-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.45-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">65ea4e5c2c53fc6c541ab02615b61a2e626a9fc0590e7cb8925083f1c900f1bf</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.45" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.45-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.45-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">dddaa1f8cdfcf8a0c63c59bb48efab0f351a105de343ddb4d5ea6ae2242db3f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="6" from="release-engineering@redhat.com">
    <id>RHSA-2026:22139</id>
    <issued date="2026-06-01 01:05:02 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2026 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>6</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

Security Fix(es):

* openjdk: OpenJDK: Enhance crypto algorithm support (Oracle CPU 2026-04) (CVE-2026-22007)

* openjdk: OpenJDK: Enhance Path Factories Redux (Oracle CPU 2026-04) (CVE-2026-22016)

* openjdk: OpenJDK: Improve Kerberos credentialing (Oracle CPU 2026-04) (CVE-2026-22013)

* openjdk: OpenJDK: Enhance Zip file reading (Oracle CPU 2026-04) (CVE-2026-22018)

* openjdk: OpenJDK: Enhance certificate chain validation (Oracle CPU 2026-04) (CVE-2026-22021)

* openjdk: OpenJDK: Enhance key generation (Oracle CPU 2026-04) (CVE-2026-34268)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2026-06-01 01:05:02 UTC" />
    <references>
      <reference id="RHSA-2026:22139" title="RHSA-2026:22139" type="self" href="https://access.redhat.com/errata/RHSA-2026:22139" />
      <reference id="2460038" title="CVE-2026-22007 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2460038" />
      <reference id="2460039" title="CVE-2026-22016 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2460039" />
      <reference id="2460040" title="CVE-2026-22013 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2460040" />
      <reference id="2460041" title="CVE-2026-22018 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2460041" />
      <reference id="2460042" title="CVE-2026-22021 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2460042" />
      <reference id="2460043" title="CVE-2026-34268 openjdk: Enhance key generation (Oracle CPU 2026-04)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2460043" />
      <reference id="CVE-2026-22007" title="CVE-2026-22007" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-22007" />
      <reference id="CVE-2026-22013" title="CVE-2026-22013" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-22013" />
      <reference id="CVE-2026-22016" title="CVE-2026-22016" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-22016" />
      <reference id="CVE-2026-22018" title="CVE-2026-22018" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-22018" />
      <reference id="CVE-2026-22021" title="CVE-2026-22021" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-22021" />
      <reference id="CVE-2026-34268" title="CVE-2026-34268" type="cve" href="https://access.redhat.com/security/cve/CVE-2026-34268" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.65" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.65-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.65-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5f73ff82ab14a1712ca1bf707a78984fc6df6e373abdfe6ee7034989703b71e9</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.65" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.65-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.65-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8367142ec45d06a0116d404b8a5cbb0b1289c8d16a2943e2986706dfacb44d72</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.65" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.65-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.65-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">47ef67b9240479f4fb7df93c685d3b0e699912861dc425e8863c8d95f339009d</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.65" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.65-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.65-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f1b003cec97d44f910a343b555910ee3b757c7e4d08511308b804852b6636ffd</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.65" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.65-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.65-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">15717e9de1b7f2c9f1c2bd1b4f0621d96794e93be801164dce4afaf618668898</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.65" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.65-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.65-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bc2ea0134a570f8673a7e1a1babf91f0d26797a47bd878f4d47e3f8a1c0e6ab7</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.65" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.65-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.65-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9229e4ad2702da700bde2d8f7b4274798cec6fb24d47750a5df69daca6919beb</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.65" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.65-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.65-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e15a9ecbdc7e418af5c5c1902e81c896f8065f78058c8a734b19663b535a20c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="release-engineering@redhat.com">
    <id>RHBA-2020:5507</id>
    <issued date="2020-12-15 16:08:48 UTC" />
    <title>java-1.8.0-ibm bug fix and enhancement update</title>
    <release>0</release>
    <rights>Copyright 2020 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>None</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux
8.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM
Java Software Development Kit.

Bug Fix(es) and Enhancement(s):

* RHEL8.2 - IBM Java 8 fix for z15 compression problem (fixed with IBM Java
8 SR6 FP16) (BZ#1886077)</description>
    <updated date="2020-12-15 16:08:48 UTC" />
    <references>
      <reference id="RHBA-2020:5507" title="RHBA-2020:5507" type="self" href="https://access.redhat.com/errata/RHBA-2020:5507" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.6.16" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.16-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.6.16-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">37c6c8aa83662ab5f103de8b1020efe41a74786d452bfeb2cbb15eeeed355d5a</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.6.16" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.16-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.6.16-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">ea16f1567ae9a701dc28649c416146e9b35387d53bbf8249aa31dfec9e50c8cc</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.6.16" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.16-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.6.16-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">9f818b7a727b2e1c6b249ffc0281bf900eb182477e11066153cd730926b6534a</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.6.16" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.16-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.6.16-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">d5b16fe4284665878cafc9f0cc36e71b40112076e83e87319623240e3b107a19</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.6.16" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.16-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.6.16-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">ac14568362d77c3736dc2fc84913d7320199905b7ca4a78fefe139f5f18a1115</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.6.16" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.16-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.6.16-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">8872bc527ea68a113d3920cbb5033c1c734d7cb6ff9a7bae62721c1d4c11a285</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.6.16" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.16-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.6.16-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">5af5aac05b0a9002a8f255716246ce44c3346381047ef91f603cc7f199289131</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.6.16" release="1.el8_3" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.16-1.el8_3.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.6.16-1.el8_3.x86_64.rpm</filename>
          <sum type="sha256">9e144bf18bbc0c484c940669cee5300f2fbc6b220ad5191578dafda7df14db1d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2022:0345</id>
    <issued date="2022-02-01 15:01:14 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2022 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>3</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR7.

Security Fix(es):

* Oracle JDK: unspecified vulnerability fixed in 8u311 (Deployment) (CVE-2021-35560)

* OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967) (CVE-2021-35565)

* OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167) (CVE-2021-35556)

* OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580) (CVE-2021-35559)

* OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137) (CVE-2021-35564)

* OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729) (CVE-2021-35578)

* OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735) (CVE-2021-35586)

* IBM JDK: IllegalAccessError exception not thrown for MethodHandles that invoke inaccessible interface methods (CVE-2021-41035)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2022-02-01 15:01:14 UTC" />
    <references>
      <reference id="RHSA-2022:0345" title="RHSA-2022:0345" type="self" href="https://access.redhat.com/errata/RHSA-2022:0345" />
      <reference id="2014508" title="CVE-2021-35565 OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2014508" />
      <reference id="2014515" title="CVE-2021-35556 OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2014515" />
      <reference id="2014518" title="CVE-2021-35559 OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2014518" />
      <reference id="2015061" title="CVE-2021-35564 OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2015061" />
      <reference id="2015308" title="CVE-2021-35586 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2015308" />
      <reference id="2015653" title="CVE-2021-35578 OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2015653" />
      <reference id="2027731" title="CVE-2021-35560 Oracle JDK: unspecified vulnerability fixed in 8u311 (Deployment)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2027731" />
      <reference id="2027791" title="CVE-2021-41035 IBM JDK: IllegalAccessError exception not thrown for MethodHandles that invoke inaccessible interface methods" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2027791" />
      <reference id="CVE-2021-35556" title="CVE-2021-35556" type="cve" href="https://access.redhat.com/security/cve/CVE-2021-35556" />
      <reference id="CVE-2021-35559" title="CVE-2021-35559" type="cve" href="https://access.redhat.com/security/cve/CVE-2021-35559" />
      <reference id="CVE-2021-35560" title="CVE-2021-35560" type="cve" href="https://access.redhat.com/security/cve/CVE-2021-35560" />
      <reference id="CVE-2021-35564" title="CVE-2021-35564" type="cve" href="https://access.redhat.com/security/cve/CVE-2021-35564" />
      <reference id="CVE-2021-35565" title="CVE-2021-35565" type="cve" href="https://access.redhat.com/security/cve/CVE-2021-35565" />
      <reference id="CVE-2021-35578" title="CVE-2021-35578" type="cve" href="https://access.redhat.com/security/cve/CVE-2021-35578" />
      <reference id="CVE-2021-35586" title="CVE-2021-35586" type="cve" href="https://access.redhat.com/security/cve/CVE-2021-35586" />
      <reference id="CVE-2021-41035" title="CVE-2021-41035" type="cve" href="https://access.redhat.com/security/cve/CVE-2021-41035" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm" version="1.8.0.7.0" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.0-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.7.0-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">4aac5aa71ff5377a7c8e9d473d2b0eb778321734e4f778a65bec89b07c7b1cb8</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.7.0" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.0-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.7.0-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">cfaa0844c61292ee6ca2aaebcee7f983bbbb55df55d89e6998bd971aa835f30b</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.7.0" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.0-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.7.0-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">46fe7f5b342f92a28dc1becb89d1511b2ff2bc7e3f40e7340c766e9cccaff58e</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.7.0" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.0-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.7.0-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">0f8f28046c2e94f949be1fb68908dbc85a713652de857997e57d5cc6c1403f63</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.7.0" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.0-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.7.0-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">a4f0b6bc7da9461ed29dc5dcfc38e619f8b0f28aa2b2b6b4ea66bcdd2fb566b2</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.7.0" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.0-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.7.0-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">fd924e08c36cbdc5093b59502455eeababb53c370ca6f016d877f4f2a28fde25</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.7.0" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.0-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.7.0-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">3b448b83801d69628750bba505ad98c56e631397d625388b556a9ba1745611aa</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.7.0" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.0-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.7.0-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">70d05dbcb4933e7969522f83c7994dc2636775488df4bbcc239b4a3f2775b063</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2020:0046</id>
    <issued date="2020-01-07 14:59:15 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2020 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>3</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR6.

Security Fix(es):

* OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) (CVE-2019-2975)

* OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978)

* OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989)

* Oracle JDK: unspecified vulnerability fixed in 8u221 (Deployment) (CVE-2019-2996)

* IBM JDK: Unrestricted access to diagnostic operations (CVE-2019-17631)

* OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945)

* OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019-2962)

* OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) (CVE-2019-2964)

* OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) (CVE-2019-2973)

* OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) (CVE-2019-2981)

* OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) (CVE-2019-2983)

* OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) (CVE-2019-2988)

* OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) (CVE-2019-2992)

* OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) (CVE-2019-2999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2020-01-07 14:59:15 UTC" />
    <references>
      <reference id="RHSA-2020:0046" title="RHSA-2020:0046" type="self" href="https://access.redhat.com/errata/RHSA-2020:0046" />
      <reference id="1760963" title="CVE-2019-2964 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1760963" />
      <reference id="1760969" title="CVE-2019-2975 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1760969" />
      <reference id="1760978" title="CVE-2019-2973 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1760978" />
      <reference id="1760980" title="CVE-2019-2981 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1760980" />
      <reference id="1760992" title="CVE-2019-2999 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1760992" />
      <reference id="1760999" title="CVE-2019-2988 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1760999" />
      <reference id="1761006" title="CVE-2019-2978 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1761006" />
      <reference id="1761146" title="CVE-2019-2992 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1761146" />
      <reference id="1761262" title="CVE-2019-2983 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1761262" />
      <reference id="1761266" title="CVE-2019-2962 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1761266" />
      <reference id="1761596" title="CVE-2019-2945 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1761596" />
      <reference id="1761601" title="CVE-2019-2989 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1761601" />
      <reference id="1778942" title="CVE-2019-2996 Oracle JDK: unspecified vulnerability fixed in 8u221 (Deployment)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1778942" />
      <reference id="1779880" title="CVE-2019-17631 IBM JDK: Unrestricted access to diagnostic operations" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1779880" />
      <reference id="CVE-2019-2945" title="CVE-2019-2945" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2945.html" />
      <reference id="CVE-2019-2962" title="CVE-2019-2962" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2962.html" />
      <reference id="CVE-2019-2964" title="CVE-2019-2964" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2964.html" />
      <reference id="CVE-2019-2973" title="CVE-2019-2973" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2973.html" />
      <reference id="CVE-2019-2975" title="CVE-2019-2975" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2975.html" />
      <reference id="CVE-2019-2978" title="CVE-2019-2978" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2978.html" />
      <reference id="CVE-2019-2981" title="CVE-2019-2981" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2981.html" />
      <reference id="CVE-2019-2983" title="CVE-2019-2983" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2983.html" />
      <reference id="CVE-2019-2988" title="CVE-2019-2988" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2988.html" />
      <reference id="CVE-2019-2989" title="CVE-2019-2989" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2989.html" />
      <reference id="CVE-2019-2992" title="CVE-2019-2992" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2992.html" />
      <reference id="CVE-2019-2996" title="CVE-2019-2996" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2996.html" />
      <reference id="CVE-2019-2999" title="CVE-2019-2999" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-2999.html" />
      <reference id="CVE-2019-17631" title="CVE-2019-17631" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-17631.html" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.6.0" release="3.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.0-3.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.6.0-3.el8_1.x86_64.rpm</filename>
          <sum type="sha256">701ceaf2a0d8cb8d15a5832dcfd0dba1b5d081147979fa12ffbf236b26f60a37</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.6.0" release="3.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.0-3.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.6.0-3.el8_1.x86_64.rpm</filename>
          <sum type="sha256">388c03e75898025aeae767db2c2ef2b7d9b7e12d9a0db369b24704422d03ca25</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.6.0" release="3.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.0-3.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.6.0-3.el8_1.x86_64.rpm</filename>
          <sum type="sha256">af455429edfd9bf0d77817175e432991eb0592c37d6a7709748d57889f41ed2c</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.6.0" release="3.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.0-3.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.6.0-3.el8_1.x86_64.rpm</filename>
          <sum type="sha256">6ec9b73a375ee1bdd4536c1f045211ea91293d10e59a9af7eeb03849adc2203a</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.6.0" release="3.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.0-3.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.6.0-3.el8_1.x86_64.rpm</filename>
          <sum type="sha256">ce9002e3317d93470b2c113ffe780898acc952020d8adbfe014656de5de9816e</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.6.0" release="3.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.0-3.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.6.0-3.el8_1.x86_64.rpm</filename>
          <sum type="sha256">96e172b5d80426f48ff5e123f8efa345c68620830619a161f5141bfcdb556cfa</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.6.0" release="3.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.0-3.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.6.0-3.el8_1.x86_64.rpm</filename>
          <sum type="sha256">5b4cdedccbdbbc6881b3f6c1687d0470a63bf20a5ed6e9d3de098e16f5eb1a96</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.6.0" release="3.el8_1" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.0-3.el8_1.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.6.0-3.el8_1.x86_64.rpm</filename>
          <sum type="sha256">79bd61f43325392d8eb274ca3074a7458a6ef64260943ce3ccc2bf9209bb9add</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2025:22370</id>
    <issued date="2025-12-01 01:04:51 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2025 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>1</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP55.

Security Fix(es):

* Enhance certificate handling (CVE-2025-53057)

* Enhance Path Factories (CVE-2025-53066)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2025-12-01 01:04:51 UTC" />
    <references>
      <reference id="RHSA-2025:22370" title="RHSA-2025:22370" type="self" href="https://access.redhat.com/errata/RHSA-2025:22370" />
      <reference id="CVE-2025-53057" title="CVE-2025-53057" type="cve" href="https://access.redhat.com/security/cve/CVE-2025-53057" />
      <reference id="CVE-2025-53066" title="CVE-2025-53066" type="cve" href="https://access.redhat.com/security/cve/CVE-2025-53066" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.55" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.55-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.55-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">775ad965a6d8e8b14eb8830d3462c22a1ea50e5500841eacf31e6fbb174b1f0d</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.55" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.55-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.55-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a78080b218405db28e70e35868dc7b079803bcea24f3f0a5905db47c5a63ac7b</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.55" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.55-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.55-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">696b278aa5b3ae59c8e88eb759c1fd9c231fb5ec64d017775e9b51e530ea26d4</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.55" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.55-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.55-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">564722b2af6c209e1d89f9750a41f2f15e92fed170cfad3a719c410fc5d2e20f</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.55" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.55-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.55-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9401171436fb62a3e78ac2b8b9604e97dff7c144cede64c6c42f4784516c3a38</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.55" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.55-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.55-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bf112d5d08111645114ede12b7b0d09aa21c0f593c1bfcc64bca461eda963685</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.55" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.55-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.55-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b96e12a6a2f4b87059d3dc10ac876fdb26f578b28dd1373d8ae0f9dc12e43fe6</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.55" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.55-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.55-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6de5e2a701fbbd7d8e2dc53e588d7e8ea6724adfbc333d608ba7c47a9916c870</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="2" from="release-engineering@redhat.com">
    <id>RHSA-2024:3685</id>
    <issued date="2024-06-06 13:10:06 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2024 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP15.

Security Fix(es):

* IBM JDK: Object Request Broker (ORB) denial of service (CVE-2023-38264)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2024-06-06 13:10:05 UTC" />
    <references>
      <reference id="RHSA-2024:3685" title="RHSA-2024:3685" type="self" href="https://access.redhat.com/errata/RHSA-2024:3685" />
      <reference id="2279963" title="CVE-2023-38264 IBM JDK: Object Request Broker (ORB) denial of service" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2279963" />
      <reference id="CVE-2023-38264" title="CVE-2023-38264" type="cve" href="https://access.redhat.com/security/cve/CVE-2023-38264" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.25" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.25-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.25-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1b889c14982f6583e0f1b9007ebd7ef4800c13faf2c66c1decff9a64aee05b83</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.25" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.25-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.25-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2f156d656c4190a0382ee460848e7d4f38a4847a07fc9c36bbc7c4ee4aa86fab</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.25" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.25-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.25-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ac801e134f9423c908a503c43fbfb5f4fab19f69ddfc7d0ae80dff30a34a83a7</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.25" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.25-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.25-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d996e78845117cda4341098d18468f3f0cbb44ba62089867590da8268d0ea6e3</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.25" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.25-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.25-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3af8d55d2af390085baa13785f9a2f390e30c2a706570534f4f0c4c121c9daf5</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.25" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.25-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.25-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">081086abeabfd7394527ac49d37c0b59fd06a36153c6cadf333f7670d3854a6a</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.25" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.25-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.25-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">52b411079569921472cbb33eee207418cfcdb785c9f2d412009d1a493a373567</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.25" release="1.el8_10" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.25-1.el8_10.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.25-1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8a7e098f0a9c96b523dd2c46b690eff8a836408e3229f171cd15177b6fc2203d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="2" from="release-engineering@redhat.com">
    <id>RHEA-2024:1611</id>
    <issued date="2024-04-02 14:57:07 UTC" />
    <title>zhongyi-song-fonts enhancement update</title>
    <release>0</release>
    <rights>Copyright 2024 Red Hat Inc</rights>
    <solution>Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258</solution>
    <severity>None</severity>
    <summary>An update for zhongyi-song-fonts is now available for Red Hat Enterprise Linux 8.</summary>
    <pushcount>2</pushcount>
    <description>The zhongyi-song-fonts package provides Zhong Yi Song, a GB18030 Standard Ming Face Chinese Font.

Enhancement:

* Update zhongyi-song-fonts to support GB18030-2022 Level 2 (RHEL-17169)</description>
    <updated date="2024-04-02 14:57:05 UTC" />
    <references>
      <reference id="RHEA-2024:1611" title="RHEA-2024:1611" type="self" href="https://access.redhat.com/errata/RHEA-2024:1611" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="zhongyi-song-fonts" version="3.00" release="1.20231016.1.el8_9" epoch="0" arch="noarch" src="zhongyi-song-fonts-3.00-1.20231016.1.el8_9.src.rpm">
          <filename>zhongyi-song-fonts-3.00-1.20231016.1.el8_9.noarch.rpm</filename>
          <sum type="sha256">bd56faacafdf37fb71ce83cf6f7abe649ed194355fc6a3891942b5e037dbc23b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="2" from="release-engineering@redhat.com">
    <id>RHSA-2023:4877</id>
    <issued date="2023-08-30 13:40:26 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2023 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP10.

Security Fix(es):

* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2023-08-30 13:40:26 UTC" />
    <references>
      <reference id="RHSA-2023:4877" title="RHSA-2023:4877" type="self" href="https://access.redhat.com/errata/RHSA-2023:4877" />
      <reference id="2221647" title="CVE-2023-22049 OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2221647" />
      <reference id="CVE-2023-22049" title="CVE-2023-22049" type="cve" href="https://access.redhat.com/security/cve/CVE-2023-22049" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.8.10" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.10-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.8.10-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">27e57367bda06981f7b0a6e614095e62342ed855ac287eacefe4967f95ce1987</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.8.10" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.10-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.8.10-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">e22f8e8f1fe664f54853da05ba97cd62bbd96b6e00b228f4cba0cdda0d1841e2</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.8.10" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.10-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.8.10-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">f854b375fa28e29d9ca591efcdf7106cd0c07f00e8fe02d5a88e7ace2f3fc0ec</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.8.10" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.10-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.8.10-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">648c5b805efb9ce7942e3d38881693d0eff629d4ae91e38eacc6fc01fe028a2f</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.8.10" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.10-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.8.10-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">e08cc41c047a9e3f54f773bc43d963ad00b0d94937253708d3668e0806a7aa55</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.8.10" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.10-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.8.10-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">674cdd3d036d16c7e29f73edaa7919004a51d4bf3441a856492134bf309e4171</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.8.10" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.10-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.8.10-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">27ec239c79db28b3ec40e41b411c440771dfb12b7bbf42e5add2805af727beee</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.8.10" release="1.el8_8" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.8.10-1.el8_8.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.8.10-1.el8_8.x86_64.rpm</filename>
          <sum type="sha256">bfa12f19e1a18f9f163208a664a2e5cc01b5c04122a637a7f499dbd5ac591299</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="2" from="release-engineering@redhat.com">
    <id>RHSA-2022:5837</id>
    <issued date="2022-08-02 07:29:26 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2022 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR7-FP10.

Security Fix(es):

* OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097) (CVE-2021-35561)

* OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434)

* OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443)

* OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2022-08-02 07:29:26 UTC" />
    <references>
      <reference id="RHSA-2022:5837" title="RHSA-2022:5837" type="self" href="https://access.redhat.com/errata/RHSA-2022:5837" />
      <reference id="2014524" title="CVE-2021-35561 OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2014524" />
      <reference id="2075793" title="CVE-2022-21443 OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2075793" />
      <reference id="2075836" title="CVE-2022-21434 OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2075836" />
      <reference id="2075849" title="CVE-2022-21496 OpenJDK: URI parsing inconsistencies (JNDI, 8278972)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2075849" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
      <reference id="CVE-2021-35561" title="CVE-2021-35561" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2021-35561.html" />
      <reference id="CVE-2021-41041" title="CVE-2021-41041" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2021-41041.html" />
      <reference id="CVE-2022-21434" title="CVE-2022-21434" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2022-21434.html" />
      <reference id="CVE-2022-21443" title="CVE-2022-21443" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2022-21443.html" />
      <reference id="CVE-2022-21496" title="CVE-2022-21496" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2022-21496.html" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.7.10" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.10-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.7.10-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">77b1a647193b19c3868c3bd276f222a6368a1040499267cc534c0e5b4aba2ba0</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.7.10" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.10-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.7.10-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">f757d04b9c171bc4834df65e80770c717def5389bc62dccde860fa6871c78223</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.7.10" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.10-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.7.10-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">ddf842cb6e547315e4ed478c9fe34746e9e508d09f392cd91210fbda4688c93e</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.7.10" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.10-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.7.10-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">48ee57f8f45f6eab5386cf7be6c77ab3fc8f3217e64ba25ae78a054705724ecf</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.7.10" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.10-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.7.10-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">452ce26614c1bf62ef78417ee08bac54e3054a64a75b6364eb644524dae81a3d</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.7.10" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.10-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.7.10-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">23151b8904a5f473a3e597f16ceeb44efe495b96d4944ea18e8636ac31771d12</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.7.10" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.10-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.7.10-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">0c36c996c15b2cf4c1da2405daad9265e9bff7f0cc65cc0713138188b85891c1</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.7.10" release="1.el8_6" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.10-1.el8_6.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.7.10-1.el8_6.x86_64.rpm</filename>
          <sum type="sha256">3f27e024cb9ef490ad6f935ba0abb49e5ad58ff13f015d37d47d8a5f477a1210</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2022:0970</id>
    <issued date="2022-03-21 07:19:20 UTC" />
    <title>Moderate: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2022 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Moderate</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR7-FP5.

Security Fix(es):

* OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210) (CVE-2021-35550)

* OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934) (CVE-2022-21248)

* OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392) (CVE-2022-21293)

* OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416) (CVE-2022-21294)

* OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026) (CVE-2022-21340)

* OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236) (CVE-2022-21341)

* OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756) (CVE-2022-21360)

* OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838) (CVE-2022-21365)

* OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618) (CVE-2021-35603)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2022-03-21 07:19:20 UTC" />
    <references>
      <reference id="RHSA-2022:0970" title="RHSA-2022:0970" type="self" href="https://access.redhat.com/errata/RHSA-2022:0970" />
      <reference id="2015311" title="CVE-2021-35603 OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2015311" />
      <reference id="2015648" title="CVE-2021-35550 OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2015648" />
      <reference id="2041417" title="CVE-2022-21293 OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2041417" />
      <reference id="2041427" title="CVE-2022-21294 OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2041427" />
      <reference id="2041491" title="CVE-2022-21360 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2041491" />
      <reference id="2041785" title="CVE-2022-21365 OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2041785" />
      <reference id="2041801" title="CVE-2022-21248 OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2041801" />
      <reference id="2041884" title="CVE-2022-21340 OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2041884" />
      <reference id="2041897" title="CVE-2022-21341 OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=2041897" />
      <reference id="CVE-2021-35550" title="CVE-2021-35550" type="cve" href="https://access.redhat.com/security/cve/CVE-2021-35550" />
      <reference id="CVE-2021-35603" title="CVE-2021-35603" type="cve" href="https://access.redhat.com/security/cve/CVE-2021-35603" />
      <reference id="CVE-2022-21248" title="CVE-2022-21248" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21248" />
      <reference id="CVE-2022-21293" title="CVE-2022-21293" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21293" />
      <reference id="CVE-2022-21294" title="CVE-2022-21294" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21294" />
      <reference id="CVE-2022-21340" title="CVE-2022-21340" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21340" />
      <reference id="CVE-2022-21341" title="CVE-2022-21341" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21341" />
      <reference id="CVE-2022-21360" title="CVE-2022-21360" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21360" />
      <reference id="CVE-2022-21365" title="CVE-2022-21365" type="cve" href="https://access.redhat.com/security/cve/CVE-2022-21365" />
      <reference id="classification" title="moderate" type="other" href="https://access.redhat.com/security/updates/classification/#moderate" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.7.5" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.5-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.7.5-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">dee2ba6152862bf01acc7d08935017732fe4ece74acb00ee1e389a3724b87a36</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.7.5" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.5-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.7.5-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">379661405d76db3c2e2c467486f9a1abb09a92154a57567cef6d26971cf63a53</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.7.5" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.5-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.7.5-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">d77289153373f38de67b12712bfe6cbf6044cf04945b537da6c54d6139e18757</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.7.5" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.5-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.7.5-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">0fb30232c9980362986ca593cc24c790a7de81f9d300e67a8ea6b56a02104d27</sum>
        </package>
        <package name="java-1.8.0-ibm" version="1.8.0.7.5" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.5-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.7.5-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">8aae3735d16c5b75943682e23f820c3d5b5041e89a84412d446d1b86efbcf771</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.7.5" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.5-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.7.5-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">2ad9481d402e516189905f971484f3e7db9fea65f9ea044535528aaeda9cee69</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.7.5" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.5-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.7.5-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">72e35d94fb689db8063a27096decd99f553eca7486f11b0b5d6f113bcfdb8c64</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.7.5" release="1.el8_5" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.7.5-1.el8_5.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.7.5-1.el8_5.x86_64.rpm</filename>
          <sum type="sha256">ce8c5252175b0edbc89f58ea07f1d9d83d80d203d9dad1f50f0ae4070d05c94a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="release-engineering@redhat.com">
    <id>RHSA-2020:3386</id>
    <issued date="2020-08-10 15:06:16 UTC" />
    <title>Important: java-1.8.0-ibm security update</title>
    <release>0</release>
    <rights>Copyright 2020 Red Hat Inc</rights>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take effect.</solution>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <pushcount>2</pushcount>
    <description>IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR6-FP15.

Security Fix(es):

* OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951) (CVE-2020-2601)

* OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920) (CVE-2020-14583)

* OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119) (CVE-2020-14593)

* IBM JDK: Information disclosure via calls to System.arraycopy() with invalid length (CVE-2019-17639)

* OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352) (CVE-2020-2590)

* OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117) (CVE-2020-14556)

* OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731) (CVE-2020-14578)

* OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736) (CVE-2020-14579)

* OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136) (CVE-2020-14621)

* OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592) (CVE-2020-14577)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <updated date="2020-08-10 15:06:16 UTC" />
    <references>
      <reference id="RHSA-2020:3386" title="RHSA-2020:3386" type="self" href="https://access.redhat.com/errata/RHSA-2020:3386" />
      <reference id="1790556" title="CVE-2020-2590 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1790556" />
      <reference id="1790570" title="CVE-2020-2601 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1790570" />
      <reference id="1856448" title="CVE-2020-14583 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1856448" />
      <reference id="1856784" title="CVE-2020-14593 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1856784" />
      <reference id="1856885" title="CVE-2020-14621 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1856885" />
      <reference id="1856896" title="CVE-2020-14556 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1856896" />
      <reference id="1856988" title="CVE-2020-14577 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1856988" />
      <reference id="1856991" title="CVE-2020-14578 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1856991" />
      <reference id="1856995" title="CVE-2020-14579 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1856995" />
      <reference id="1866497" title="CVE-2019-17639 IBM JDK: Information disclosure via calls to System.arraycopy() with invalid length" type="bugzilla" href="https://bugzilla.redhat.com/show_bug.cgi?id=1866497" />
      <reference id="CVE-2019-17639" title="CVE-2019-17639" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2019-17639.html" />
      <reference id="CVE-2020-2590" title="CVE-2020-2590" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2590.html" />
      <reference id="CVE-2020-2601" title="CVE-2020-2601" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-2601.html" />
      <reference id="CVE-2020-14556" title="CVE-2020-14556" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14556.html" />
      <reference id="CVE-2020-14577" title="CVE-2020-14577" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14577.html" />
      <reference id="CVE-2020-14578" title="CVE-2020-14578" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14578.html" />
      <reference id="CVE-2020-14579" title="CVE-2020-14579" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14579.html" />
      <reference id="CVE-2020-14583" title="CVE-2020-14583" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14583.html" />
      <reference id="CVE-2020-14593" title="CVE-2020-14593" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14593.html" />
      <reference id="CVE-2020-14621" title="CVE-2020-14621" type="cve" href="https://www.redhat.com/security/data/cve/CVE-2020-14621.html" />
      <reference id="classification" title="important" type="other" href="https://access.redhat.com/security/updates/classification/#important" />
    </references>
    <pkglist>
      <collection short="rhel-8-for-x86_64-supplementary-rpms__8_0_default">
        <name>rhel-8-for-x86_64-supplementary-rpms__8_0_default</name>
        <package name="java-1.8.0-ibm" version="1.8.0.6.15" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.15-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-1.8.0.6.15-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">e18789d48acd55fbd77375c47aa7dea0c3114e7742d67a01d8b70daf6dbd610d</sum>
        </package>
        <package name="java-1.8.0-ibm-demo" version="1.8.0.6.15" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.15-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-demo-1.8.0.6.15-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">db3c12d7e4895b663bfcdc7e89ed2f37fae0cc3088c0cd0d13a6288a4099b466</sum>
        </package>
        <package name="java-1.8.0-ibm-headless" version="1.8.0.6.15" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.15-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-headless-1.8.0.6.15-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">1b3bb31cba47a4a8ca096fd58d02a81f8b0a28ce235dcdc9148ca98d5ef7b9ff</sum>
        </package>
        <package name="java-1.8.0-ibm-webstart" version="1.8.0.6.15" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.15-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-webstart-1.8.0.6.15-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">4bbf03224ada68da8cba705c8c16ea21610c2327909b274db38ea1dd696e995c</sum>
        </package>
        <package name="java-1.8.0-ibm-jdbc" version="1.8.0.6.15" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.15-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-jdbc-1.8.0.6.15-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">e5f1d0a512167619eff2c87cdf46f77a9587361095c49054b6644c65d44fd65d</sum>
        </package>
        <package name="java-1.8.0-ibm-src" version="1.8.0.6.15" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.15-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-src-1.8.0.6.15-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">98ec5cd427321cc1d6203240d815590e848f541f60e0962b1548308d3714a418</sum>
        </package>
        <package name="java-1.8.0-ibm-plugin" version="1.8.0.6.15" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.15-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-plugin-1.8.0.6.15-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">de3cb1b7f7162f9646aa9dea70234a8c9aa744f8c02553905746749dc23686c6</sum>
        </package>
        <package name="java-1.8.0-ibm-devel" version="1.8.0.6.15" release="1.el8_2" epoch="1" arch="x86_64" src="java-1.8.0-ibm-1.8.0.6.15-1.el8_2.src.rpm">
          <filename>java-1.8.0-ibm-devel-1.8.0.6.15-1.el8_2.x86_64.rpm</filename>
          <sum type="sha256">2a6cce1ba1f0d71e93e4d85103a99e332a8bb51281b89ee4025778c6cc25d4f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>
